f49c1e3bd7
The same-call negative control fired two sequential calls with a 0.1 s timeout, so the first call timed out and the second was dropped by the 60 s suppression window; the identity gate itself was never exercised. Mirror the positive test instead: a 5 s timeout, two threads with the same tool_call_id while the callback is held on an Event. Add one test for the abandoned-worker gate: a hung callback followed by a call with a fresh tool_call_id, with suppression zeroed, must start exactly one worker. Reverting the gate change makes it fail.